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WE CLAIM: 

1 . A secure disk drive comprising: 

(a) a disk for storing data; 

(b) an input for receiving an encrypted message from a client disk drive, the encrypted 
message comprising ciphertext data and a client drive ID identifying the client disk 
drive; 

(c) a secure drive key; 

(d) an internal drive ID; 

(e) a key generator for generating a client drive key based on the client drive ID and the 
secure drive key, and an internal drive key based on the internal drive ID and the 
secure drive key; 

(f) an authenticator for verifying the authenticity of the encrypted message and 
generating an enable signal, the authenticator responsive to the encrypted message 
and the client drive key; 

(g) a data processor comprising: 

a message input for receiving the encrypted message from the client disk drive; 
a data output for outputting the ciphertext data to be written to the disk; 
an enable input for receiving the enable signal for enabling the data processor; 
a key input for receiving the internal drive key, the internal drive key for use in 

generating a message authentication code; and 
a reply output for outputting reply data, the reply data comprising the message 

authentication code; and 

(h) an output for outputting a reply to the client disk drive, the reply comprising the reply 
data and the internal drive ID. 

2. The secure disk drive of claim 1, wherein the secure drive key is immutable. 
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1 3. The secure disk drive of claim 1 > wherein the secure drive key is mutable. 

1 4. The secure disk drive of claim 1, wherein the authenticator comprises a means for 

2 verifying the access rights of the client drive ID. 

1 5. The secure disk drive of claim 1, wherein the secure drive key comprises tamper resistant 

2 circuitry. 

1 6. The secure disk drive of claim 1, wherein the key generator comprises tamper resistant 

2 circuitry. 

1 7. The secure disk drive as recited in claim 1, wherein the authenticator comprises tamper 

2 resistant circuitry. 

1 8. The secure disk drive as recited in claim 1 , wherein the data processor further comprises 

2 cryptographic facilities. 
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1 9. A secure disk drive comprising: 

2 (a) a disk for storing data; 

3 (b) an input for receiving an encrypted message from a client disk drive, the encrypted 

4 message comprising ciphertext data and a client drive ID identifying the client disk 

5 drive; 

6 (c) a secure drive key; 

7 (d) an internal drive ID; 

8 (e) a key generator for generating a client drive key based on the client drive ID and the 

9 secure drive key, and an internal drive key based on the internal drive ID and the 
10 secure drive key; 

^;;i 1 (f) an authenticator for verifying the authenticity of the encrypted message and 
;!/l2 generating an enable signal, the authenticator responsive to the encrypted message 

) x h 3 and the client drive key; 

pi 4 (g) a data processor comprising: 

2 15 a message input for receiving the encrypted message from the client secure disk drive; 

i'3 

ml 6 a data input for receiving ciphertext data read from the disk; 

I J 

rjn an enable input for receiving the enable signal for enabling the data processor; 

ti 

£3 18 a key input for receiving the internal drive key, the internal drive key for use in 

19 generating a message authentication code; and 

20 a reply output for outputting reply data, the reply data comprising the ciphertext data 

21 read from the disk and the message authentication code; and 

22 (h) an output for outputting a reply to the client disk drive, the reply comprising the reply 

23 data and the internal drive ID. 

1 10. The secure disk drive of claim 9, wherein the secure drive key is immutable. 
1 11. The secure disk drive of claim 9, wherein the secure drive key is mutable. 
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12. The secure disk drive of claim 9, wherein the authenticator comprises a means for 
verifying the access rights of the client drive ID. 

13. The secure disk drive of claim 9, wherein the secure drive key comprises tamper resistant 
circuitry. 

14. The secure disk drive of claim 9, wherein the key generator comprises tamper resistant 
circuitry. 

15. The secure disk drive as recited in claim 9, wherein the authenticator comprises tamper 
resistant circuitry. 

16. The secure disk drive as recited in claim 9, wherein the data processor further comprises 
cryptographic facilities. 
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